Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20383334.roa
File: 38322e3131382e32362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: IKuhL1psghs3fP5Hre0/I0OCAr05NSjSWwSmPBxXoio=
Subject key identifier: 68:9A:D5:A3:7C:EF:83:E2:24:68:27:F8:48:AB:14:8A:F1:1C:30:EB
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 16C8C46EED8CD3D750899D605A07FD0659C10F88
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20383334.roa
Signing time: Mon 28 Aug 2023 06:00:04 +0000
ROA not before: Mon 28 Aug 2023 05:55:04 +0000
ROA not after: Mon 26 Aug 2024 06:00:04 +0000
asID: 834
IP address blocks: 82.118.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Sep 2023 00:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c8:c4:6e:ed:8c:d3:d7:50:89:9d:60:5a:07:fd:06:59:c1:0f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Aug 28 05:55:04 2023 GMT
Not After : Aug 26 06:00:04 2024 GMT
Subject: CN=689AD5A37CEF83E2246827F848AB148AF11C30EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:49:f9:c8:b1:ff:9a:35:ae:be:0f:f5:34:
52:a3:b2:47:d4:65:4e:af:e2:ba:52:f1:f8:d4:4e:
79:ab:f9:ea:e5:26:94:84:2b:a0:62:ec:71:42:99:
c8:12:dc:32:5e:cf:98:7b:b3:38:e3:74:81:64:4e:
30:cb:f6:b7:89:82:d7:11:0f:57:73:b8:9b:2c:f0:
c4:c0:3e:a2:4c:d3:59:f5:ad:1e:14:b7:49:da:e0:
c4:5d:d1:58:1a:e0:1b:d8:b4:ca:3b:ce:61:a9:9b:
de:bc:58:47:92:ba:d9:e8:6d:10:dd:2c:6a:6d:25:
ec:06:ec:79:9c:ad:f6:75:54:b7:53:72:08:98:3b:
88:ac:c6:15:af:ab:24:d6:cd:29:08:95:d3:20:1f:
d7:64:60:e7:59:71:4b:7d:6d:4e:28:85:b4:34:9d:
ff:d4:68:d0:60:d0:70:b7:1c:a1:c4:7c:41:b3:8e:
47:3f:29:67:9c:10:a9:7b:88:98:e2:0c:b9:47:71:
0b:29:ca:77:33:53:9f:92:f5:24:60:22:7a:14:02:
d5:c2:22:b2:7f:03:d6:57:1c:9c:51:af:e9:21:5c:
c1:1d:89:ee:a5:91:2f:c5:b6:6b:5f:af:44:a9:79:
be:08:47:ed:f8:7a:56:95:79:94:df:51:05:74:c8:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9A:D5:A3:7C:EF:83:E2:24:68:27:F8:48:AB:14:8A:F1:1C:30:EB
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.26.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:4f:ef:c5:74:5a:47:bb:f0:f0:58:c6:dc:91:21:0e:8c:90:
62:31:ae:e1:fc:bc:28:9e:4f:d5:14:bb:59:15:5f:0f:7c:23:
6e:99:71:a2:d9:df:c0:68:fa:13:77:b4:00:e6:a3:c4:92:2d:
02:7b:c8:ee:1d:a4:4a:b6:b5:c5:7a:63:ee:da:6d:05:ff:e4:
17:ff:fc:fa:e6:69:12:c4:f5:17:6e:a5:99:6c:54:36:a0:24:
a9:45:82:3b:8c:b4:c7:fd:24:88:e1:2d:84:32:20:1c:1e:88:
fb:ba:19:e7:d7:57:ae:a3:53:e2:1d:8a:d0:b5:0c:29:d5:56:
59:14:e4:9d:8e:7b:ba:e6:a3:67:9e:f4:df:9b:28:e0:68:07:
fa:ce:c6:1a:51:86:b1:9a:f4:c7:42:56:e0:ea:1d:99:3a:39:
cc:af:11:fa:7b:2e:c9:99:16:b0:4b:36:02:b9:82:78:b7:2c:
3b:cf:99:30:89:ca:f0:8e:01:b6:7b:31:2d:9d:c7:c4:6d:ad:
fa:5e:08:00:e9:48:8b:19:26:a8:be:ad:d1:41:b6:e1:96:cd:
39:ee:dd:6c:c8:fe:8b:61:33:7d:d1:68:fc:82:62:16:28:77:
13:30:cc:c6:e8:8f:e0:5d:bf:f9:0b:bb:5f:fb:65:9b:3c:7b:
3f:6e:ed:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org